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Abstract 

We study a special case of Willems's two-user multi-access channel with partially cooperating 
encoders from a security perspective. This model differs from Willems's setup in that only one encoder, 
Encoder 1, is allowed to conference; Encoder 2 does not transmit any message, and there is an additional 
passive eavesdropper from whom the communication should be kept secret. For the discrete memoryless 
(DM) case, we establish inner and outer bounds on the capacity-equivocation region. The inner bound 
is based on a combination of Willems's coding scheme, noise injection and additional binning that 
provides randomization for security. For the memoryless Gaussian model, we establish lower and upper 
bounds on the secrecy capacity. We also show that, under certain conditions, these bounds agree in some 
extreme cases of cooperation between the encoders. We illustrate our results through some numerical 
examples. 

Index Terms 

Multi-access channel, wire-tap channel, conferencing, eavesdropping, security. 

I. Introduction 

Traditionally security in communication networks is achieved through encryption algorithms, 
implemented in the upper layers of the protocol stack. Wyner introduced a basic information- 
theoretic model to study security by exploiting the physical layer attributes of the channel [1]. The 
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wiretap channel studied by Wyner consists of a source, a destination (legitimate receiver) and an 
eavesdropper. The source communicates with the destination, and wishes to conceal the messages 
that it sends from the eavesdropper. Wyner establishes the secrecy capacity of this model, i.e., the 
maximum amount of information that can be sent from the source to the destination while leaking 
absolutely no information to the eavesdropper, in the discrete memoryless (DM) case when the 
source-to-eavesdropper channel is a degraded version of the source-to-destination channel. The 
secrecy capacity of the memoryless Gaussian version of Wyner's wiretap model is obtained in 
0. In l3), Csiszar and Korner generalize Wyner's wiretap model to a broadcast model with 
confidential messages (BCC). In this model, the source communicates with two destinations; it 
sends two messages, a common message that is intended to be decoded by both destinations as 
well as an individual message that is intended to be decoded by only one destination and be kept 
secret from the other destination. For the transmission of the individual message, the destination 
that recovers only the common message then plays the role of an eavesdropper. Csiszar and 
Korner characterize the capacity-equivocation region and the secrecy capacity region of the 
studied broadcast model with confidential messages. 

The seminal work by Wyner has been extended to a variety of models, including the parallel 
broadcast channel with confidential messages [4], the multi-antenna wiretap channel 
the multi-access wiretap channel |[8l- f[T0l . the relay-eavesdropper channel flTTI — f[T5l . the parallel 
relay-eavesdropper channel [16], the interference channel with confidential messages ifTTl - GOll 
and the fading wiretap channel [1211 . [|22l . The reader may refer to ll23l for recent advances on 
aspects related to information-theoretic security. 

In this work, we investigate the problem of secure communication over a multi-access channel 
(MAC) with partially cooperating encoders. The MAC with partially cooperating encoders and 
no security constraints was studied by Willems in [|24~1 . In this model, prior to transmitting 
their respective messages, the two encoders are allowed to communicate with each other over 
noiseless bit-pipes of finite-capacities. Willems characterizes the complete capacity region of this 
model for the DM case. In |[25l . Bross et al. establish the capacity region of the memoryless 
Gaussian version of Willems's model. In both (|24| and |[25l . among other observations, it is 
shown in particular that holding a conference prior to the transmission, enlarges the capacity 
region relative to the standard MAC with independent inputs. 

We study a special case of Willems's setup with an additional security constraint on the 
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Fig. 1. Multi-access channel with partially cooperating encoders and security constraints. 



communication. More specifically, as shown in Figure CD we consider a two-user multi-access 
channel in which the two users can cooperate partially through a unidirectional noiseless bit-pipe 
of finite capacity C\ 2 - Also, we restrict the role of Encoder 2 to only helping Encoder 1, i.e., 
Encoder 2 has no message of its own to transmit. Furthermore, we assume that there is a passive 
eavesdropper who overhears the transmission and from whom the communication should be kept 
secret. The eavesdropper is passive in the sense that it only listens to the transmitted information 
without modifying it. The role of Encoder 2 is then to only help Encoder 1 communicate with 
the legitimate receiver while keeping the transmitted information secret from the eavesdropper. 
From a practical viewpoint, this model may be appropriate for example for the study of the role 
of backbone connections among base stations for securing transmission in cellular environments. 
In this paper, we study the capacity-equivocation region of this model. 

The MAC model that we study in this paper has some connections with a number of related 
works studied previously. Compared with the orthogonal relay-eavesdropper channel studied in 
lfT5l . the orthogonal link between the source and the relay is replaced here by a noiseless bit- 
pipe of finite capacity Cu- Compared with the wiretap channel with a helper interferer (WT-HI) 
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studied in IfPTll , our model permits cooperation among the encoders. Finally, compared with 
the primitive relay channel of [|26l . our model imposes security constraints on the transmitted 
message. 

Contributions. Our main contributions in this paper can be summarized as follows. For the DM 
case, we establish outer and inner bounds on the capacity-equivocation region. The coding scheme 
that we use for the inner bound is based on an appropriate combination of Willems coding scheme 
j|24ll . noise injection lfl4l Theorem 3] and binning for randomization. We obtain our converse 
proof by extending the converse proof of [|24l to account for the security constraint and that of 
@ to account for the unidirectional noiseless bit-pipe cooperation among the encoders. In doing 
so, we show that one needs to redefine the involved auxiliary random variables appropriately. 
We note that characterizing the capacity-equivocation region of our model in the general setting 
is not easy; and, in fact, the capacity-equivocation region or secrecy-capacity of closely related 
models that are reported in the literature, such as [UTI . lETTl . ESI , are still to be found - the 
model of [fTTl can be seen as a special case of our model obtained by taking a noiseless bit-pipe 
of zero capacity. From this perspective, the inner and outer bounds that we develop here can be 
seen as one step ahead towards a better understanding of the full capacity-equivocation region 
of the model that we study in this paper. 

Next, we study the Gaussian memoryless model. In this case, we focus only on perfect secure 
transmission. For this model, we establish lower and upper bounds on the secrecy capacity. 
The coding scheme that we use to establish the lower bound uses ideas that are essentially 
similar to those for the DM case. The upper bound on the secrecy capacity does not involve 
auxiliary random variables and, so, is computable. Furthermore, it has the same expression as the 
secrecy capacity of the Gaussian wiretap channel with a two-antenna transmitter, single- antenna 
legitimate receiver and single-antenna eavesdropper [J3-0. 

We show that our lower bound performs well in general and is optimal in some extreme 
cases of cooperation among the encoders, including when the two encoders fully cooperate, 
i.e., C12 := oo. For the case in which the two encoders do not conference, i.e., C12 := 0, the 
model that we study reduces to a wiretap channel with a helper interferer lUTl . [|27l . In this case, 
our coding scheme reduces to merely injecting statistically independent noise lfl4l Theorem 3]; 
and, by comparing it to the upper bound that we develop, we show that it is optimal under 
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certain conditions. For the case of full cooperation among the encoders, i.e., C 12 := oo, our 
coding scheme reduces to full two-antenna cooperation for providing secrecy in the context of 
multi-antenna wiretap channels [Hl-Q. 

The rest of the paper is organized as follows. Section II provides a formal description of the 
channel model. In section III, we study the DM setting, and establish inner and outer bounds 
on the capacity-equivocation region. In section IV, we establish lower and upper bounds on 
the secrecy-capacity for the memoryless Gaussian model, and study some extreme cases of 
cooperation among the encoders. We illustrate these results through some numerical examples 
in section V. Section VI concludes the paper. 

Notations. In this paper, the notation X n is used as a shorthand for (X 1 ,X 2 , . . . ,X n ), the 
notation Xf is used as a shorthand for X i+ i, . . . , X n ), E{.} denotes the expectation operator, 
the boldface letter X denotes the co variance matrix, and H(-), h(-) denote the entropy of the 
discrete and continuous random variables respectively. We define the functions C(x) = log 2 (l+x) 
and [x} + = max{0,x}. Throughout the paper the logarithm function is taken to the base 2. 

II. Channel Model and Definitions 

Consider the model depicted in Figure [T] Encoder 1 wishes to send a confidential message to 
the legitimate receiver, in the presence of a passive eavesdropper that overhears the transmitted 
information. In doing so, Encoder 1 can get help from a second encoder, Encoder 2, to whom 
it is connected through a noiseless bit pipe of finite capacity C 12 . Encoder 2 has no message of 
its own to transmit, and is dedicated entirely to help Encoder 1 conceal its message from the 
eavesdropper. The eavesdropper is assumed to be of unlimited computational complexity and is 
fully informed about the codebooks used at the encoders. 

More formally, let W denote the message to be transmitted, taken uniformly from the set 
W = {1, • • • , 2 nR }. Encoder 1 is allowed to conference the message W to Encoder 2 using K 
communicating functions {0n,0i2, • • • ,4>\k}, over the noiseless bit-pipe. Let G\k '■= <j>ik{W), 
defined as the output of the communication process for the k-th communication, where G lfc 
ranges over the finite alphabet Q lk , k = 1,...,K. The information conferenced is bounded 
due to the finiteness of noiseless bit-pipe capacity between the two encoders. A conference is 
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permissible if communication functions are such that 

K 

X>g|& fc | <nC 12 . (1) 

k=l 

To transmit the message W, Encoder 1 sends a codeword X™ G X™, where X\ designates the 
input alphabet at Encoder 1 . Encoder 2 transmits a codeword X% G A^™ where X 2 designates the 
input alphabet at Encoder 2. Let y and Z designate the output alphabets at the legitimate receiver 
and eavesdropper, respectively. The legitimate receiver gets the channel output Y n G y n , and 
tries to estimate the transmitted message from it. The eavesdropper overhears the channel output 
Z n G Z n . The transmission over the channel is characterized by the memoryless conditional 
probability p(y, z\x\, x 2 ). The channel is memoryless in the sense that 

n 

p(y n ,z n \x^,x%) = Y[p(y i ,z i \x lji ,x 2 ,i). (2) 
i=i 

Definition 1: A (2 nR ,n) code for the multi-access model with partially cooperating encoders 
shown in Figure Q] consists of encoding functions^] 
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> (3) 
and a decoding function ^(-) at the legitimate receiver 

i/j : ^ n — )• W. (4) 

Definition 2: The average error probability for the (2 nR , n) code is defined as 

P e=^R E M^^^l^}- (5) 

The eavesdropper overhears to what the encoders transmit and tries to guess the information 
from it. The equivocation rate per channel use is defined as R e = H(W\Z n )/n. 



'The source encoder, <f>i, is a stochastic encoder that introduces additional randomization to increase secrecy. 
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Definition 3: A rate-equivocation pair (R, R e ) is said to be achievable if for any e > there 
exists a sequence of codes (2 nR , n) such that for any n > n(e) 

n 

n 

P: < e. (6) 

Definition 4: The secrecy capacity is defined as the maximum achievable rate at which the 
communication rate is equal to the equivocation rate, i.e., (R, R e ) = (R,R). 

III. Discrete Memoryless Case 

In this section we establish outer and inner bounds on the capacity-equivocation region for 
the MAC with partially cooperating encoders shown in Figure [Q 

A. Outer Bound 

The following theorem provides an outer bound on the capacity-equivocation region of the 
MAC with partially cooperating encoders and security constraints shown in Figure [T] 

Theorem 1: For the MAC with partially cooperating encoders and security constraints shown 
in Figure [Q and for any achievable rate-equivocation pair (R,R e ), there exist some random 
variables U -h- {V x ,V 2 ) -h- (X u X 2 ) -h- (Y,Z), such that (R,R e ) satisfies 

R < min{J(Vi, V 2 ; Y), I(Vi; Y\V 2 ) + C 12 } 

Re — R 

R e < mm{I(V u V 2 ; Y\U) - I(V U V 2 ; Z\U), 7(y i; Y\V 2 , U) + C 12 - I(V U V 2 ; Z\U)}. (7) 

Proof: The proof of Theorem \T\ is given in Appendix HI □ 

Remark 1: The proof of Theorem \T\ extends the converse proof of []3] to the case of two 
encoders, and extends the converse proof of [|24l so as to account for the imposed security 
constraint. Furthermore, the outer bound of Theorem [T]reduces to the secrecy capacity of Wyner's 
wiretap channel fl] by removing the helping encoder, Encoder 2. 
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Remark 2: In the special case in which C 12 := 0, the model in Figure \T\ reduces to a 
transmitter (Encoder 1) sending a confidential message to its intended receiver in the presence of 
a passive eavesdropper and with the help of an external independent interferer (Encoder 2). This 
model is referred to as being a wiretap channel with a helping interferer (WT-HI), and is studied 
in ifTTl . 11271 . The capacity-equivocation region of the WT-HI is still unknown. In [fTTl . and also 
11271 . the authors derive achievable secrecy rates as well as computable upper bounds on the 
secrecy capacity of the WT-HI. The outer bounds of [fTTl . [|2~71 are of Sato-type. By specializing 
the outer bound of Theorem Q] to the case C\ 2 ■= 0, one readily obtains an alternative outer 
bound on the capacity equivocation region of the WT-HI. It is not easy to compare the obtained 
outer bound with the outer bounds of [fP71 . [1271 . since the former involves auxiliary random 
variables. 

B. Inner Bound 

We now turn to establish an inner bound on the capacity-equivocation region of the MAC 
with partially cooperating encoders and security constraints shown in Figure [Q The following 
theorem states the result. 

Theorem 2: For the MAC with partially cooperating encoders and security constraints shown 
in Figured] the rate pairs in the closure of the convex hull of all (R, R e ) satisfying 

R < min{J(Vi, V 2 - Y\U), /(Vi; Y\V 2 , V, U) + C 12 } 

Re — R 

R e < [mm{I(V 2 ; Y\V, U), I(V 2 ; Z\V U V,U)} + min{/(F 1 , V 2 ; Y\U), I{V X \ Y\V 2 , V, U) + C l2 ] 
- I(Vi, V 2 ; Z\U)] + (8) 

for some measure p(u, v, V\, v 2 , x\,x 2 , y, z) = p(u)p(v\u)p(vi\v, u)p(v 2 \v, u)p(xi\vi)p(x 2 \v 2 ) 
.p{y,z\x\,x 2 ), are achievable. 

Outline of Proof: 

We briefly outline the coding scheme that we use to prove the achievability of the inner bound of 
Theorem |2l and relegate the details of the proof to Appendix HO The inner bound of Theorem |2] is 
based on a coding scheme that consists in appropriate careful combination of Willems's coding 
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scheme [241, noise injection Ifl4l Theorem 3] and binning for randomization to provide security. 
Let W denote the message to be transmitted. Using the noiseless bit-pipe of finite capacity, 
Encoder 1 conferences a part of the information message W to Encoder 2. After completion of 
the conferencing process, this part can be regarded as a common information to be transmitted by 
both encoders. The random variable V in Theorem |2] represents this common information. The 
part of the information message that is sent only by Encoder 1 can be regarded as an individual 
message. The random variable V\ in Theorem |2] represents this individual information. The input 
of Encoder 2 is composed of the common information, which it has received through noiseless 
finite capacity link from Encoder 1, and a statistically independent artificial noise component. 
The random variable V 2 in Theorem |2] represents the input from Encoder 2. The transmission of 
both common information and artificial noise components at Encoder 2 in Theorem |2]is adjusted 
by appropriate selection of random variable V . Additional random binning is employed to secure 
both individual and common information from the passive eavesdropper [jT). Finally, the random 
variable U in Theorem |2] stands for a channel prefix. □ 

Remark 3: The region established in Theorem |2] reduces to the special case R 2 = of 
the capacity region of the MAC with cooperating encoders and no security constraints in [1241 
Theorem 1] by setting R e := 0, U :=constant, V\ := X x and V = V 2 = X 2 in ©. 

Remark 4: As we indicated previously, in the special case in which C\ 2 : = 0, the model of 
Figure Q] reduces to a wiretap channel with a helping interferer (WT-HI). By setting R e := R 
(i.e., restricting to the case of perfect secrecy) and U = V = in ([8]), we obtain the following 
lower bound on the secrecy capacity of the WT-HI, 

R e < max [min{/(^, V 2 ; Y) - I{V X , V 2 ; Z), J(^; Y\V 2 ) - I{V x] Z)}}+ (9) 

where the maximization is over joint measures of the form p(vi)p(v 2 )p(xi\vi)p(x 2 \v 2 ). In [TTTll . 
the authors establish several achievable secrecy rates for the WT-HI for different regimes of the 
relative strength of the interference. The lower bound |9] has an expression that is essentially 
similar to one that is developed for the case of a strong interference regime in [fTTl Section 
III-C] ; but is potentially larger since it involves auxiliary random variables V\ and V 2 in place of 
the inputs Xi and X 2 in lUTl Section III-C]. The specific choice V\ :— X± and V 2 := X 2 gives 
the lower bound of [fTTl Section III-C] in the case of strong interference. 
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IV. Memoryless Gaussian Model 

In this section, we study the Gaussian version of the MAC with partially cooperating encoders 
and security constraints shown in Figure [T| We only focus on the case of perfect secrecy. 

A. Channel Model 

For the Gaussian model, the outputs of the MAC at the legitimate receiver and eavesdropper 
for each symbol time are given by 

Y = h ld Xi + h 2d X 2 + Ni 

Z = h lt Jd + h 2e X 2 + N 2 (10) 

where hid, h 2 d, hi e , and h 2e are the channel gain coefficients associated with Encoder 1-to- 
destination (1-D), Encoder 2-to-destination (2-D), Encoder 1-to-eavesdropper (1-E), and Encoder 
2-to-eavesdropper (2-E) links respectively. The noise processes {A r i i } and {N 2ji } are independent 
and identically distributed (i.i.d) with the components being zero mean Gaussian random 
variables with variances a\ and erf, respectively; and X 1A and X 2ji are the channel inputs from 
Encoder 1 and Encoder 2 respectively. The channel inputs are bounded by average block power 
constraints 

n n 
i=l i=l 

B. Upper Bound on the Secrecy Capacity 

In this section, we establish an upper bound on the secrecy capacity on Gaussian MAC (flOl) . 
We establish a computable upper bound using the techniques developed earlier to establish the 
secrecy capacity of a multiple-input multiple-output (MIMO) wiretap channel — taking 

a setup with two antennas at the transmitter, one antenna at the legitimate receiver and one 
antenna at the eavesdropper in our case. 

Corollary 1: For the Gaussian MAC with partially cooperating encoders and security 
constraints (flOt . an upper bound on the secrecy capacity is given by 

iC = max[J(X 1 ,X 2 ; Y) - I(X U X 2 ; Z)] (12) 
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where [X 1 ,X 2 \ ~ N(0,K P ) with JC P = |k p : K P = 
E[Xf\, E[X|] satisfying CCD- 

Alternatively, we can also establish the upper bound ([TIT ) from the rate-equivocation region 
established for the DM case in Theorem [Q as follows. Taking the first term of minimization in 
the bound on the equivocation rate in Theorem [T] we get 

R e < max [I(V U V 2] Y\U) - I(V U V 2 ; Z\U)] (13) 

where U -H- (Vi, V 2 ) -H- (X 1 ,X 2 ) (Y, Z). The rest of the proof closely follows the bounding 
technique established in lfT6ll . in the context of a parallel relay-eavesdropper channel. More 
specifically, continuing from (fT3l we get 



Pi ^y/PlP2 

i>VT\P^ P 2 



1 < V < 1 f> with 



^ e < /(y 1 ,^ 2 ;F|f/)-J(V 1 ,V 2 ;Z|t/) 

< J(Vi, V 2 ; ^) - -f(Vi> V2; Z) 

< /(Vi, V 2 ; Y, Z) — /(Vi, V 2 ; Z) 

i [I(X h X 2 ; Y, Z) - I(X U X 2 ; Y, Z\V h V 2 )} - [I(X h X 2 ; Z) - I(X 1} X 2 ; Z\V h V 2 )\ 
= [I(X U X 2 - Y, Z) - I(X U X 2 - Z)\ - [I(X U X 2 ; Y,Z\V U V 2 ) - I(X U X 2 ; Z\V U V 2 )] 

< I(X u X 2 ;Y,Z)-I(X ll X 2 ;Z) 

= I(X 1 ,X 2 ;Y\Z) (14) 

where (a) follows from the fact that the difference of conditional mutual information 

I(Vl, V 2 ; Y\U) - 7(Vi, V 2 ; Z\U) is maximized by U := constant and (b) holds since (Vi, V 2 ) 
(X 1 ,X 2 ) <H- (Y, Z) is a Markov chain. 

Now, the upper bound in (IT4|) can be tightened by using an argument previously used in , BH 
in the context of multi-antenna wiretap channel. Noticing that the upper bound ([T3l depends on 
p(y, z\x±, x 2 ) only through its marginals p{y\x\,x 2 ) and p{z\x\,x 2 ), the upper bound (fl4l can 
be further tightened as 

R e < min max I{X X ,X 2 ;Y'\Z') (15) 

p(y',z'\xi,X2) p(xi,X2) 

where the joint conditional p(y', z'\x±, x 2 ) has the same marginals as p(y, z\x±, x 2 ), i.e., 
p(y'\xi,x 2 ) = p(y\x 1 ,x 2 ) and p{z'\x!,x 2 ) = p(z\x 1 ,x 2 ). 
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Following (5]|, (61, it can be shown that the bound in < fT5T ) is maximized with the jointly 
Gaussian inputs [X 1 ,X 2 ] ~ A/"(0,K P ), with E[Xf] and E[X|] satisfying (fTTT) . 
Finally, evaluation of the upper bound (fT3T > with these jointly Gaussian inputs and then the 
minimization over all possible correlations between Y' and Z' yield the desired result. 



C. Lower Bound on the Secrecy Capacity 

For the Gaussian MAC with partially cooperating encoders and security constraints (flOT l. we 
obtain a lower bound on the secrecy capacity by using our result for the DM model in Theorem 
[2l The results established for the DM case can be readily extended to memoryless channels with 
discrete time and continuous alphabets using standard techniques ||29l Chapter 7]. 



Corollary 2: For the Gaussian MAC with partially cooperating encoders and security 
constraints (flOl ). a lower bound on the secrecy capacity is given by 



i?' ow = max 

0<Q<1. 

0</J<l 



P\h 2d \ 2 P 2 
al + a\h ld \ 2 Pi 



P\h 2e \ 2 P 2 



, a\hi d \'Pi \ , - r I IM^i + \h 2d \ 2 P 2 + 2^af3\h ld \ 2 P 1 \h 2d \ 2 P 2 

+ Ll2, C [ 



-CI 



\h le \ 2 Pi + \h 2e \ 2 P 2 + 2^afi\h le \ 2 P 1 \h 2e \ 2 P 2 



(16) 



Proof: The achievability follows by computing the inner bound in Theorem |2] with the choice 
U := constant, V 1 := X 1 and V 2 := X 2 , X 1 := ^PV,^ + ^PV)V , X 2 := ^/i^)X 2 + 
\J (/3P 2 )V, where X\, X 2 and V be independent random variables with A/"(0, 1), and a E [0, 1], 
a :— 1 — a, f3 G [0, 1], and /3 :— 1 — /?. Straightforward algebra that is omitted for brevity gives 
£16]). □ 



D. Analysis of Some Extreme Cases 

In this section we study two special cases of the Gaussian MAC (flOl) with partially cooperating 
encoders shown in Figure [Q where the capacity of the bit-pipe is either, 
1) C 12 = 0, or 
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2) Ci 2 = oo. 

The first case corresponds to the wiretap channel with a helping interferer (WT-HI) studied in 
ifTTl . 11271 . The second case corresponds to a two-antenna transmitter wiretap channel []6], fl30l . 

1) Case C\2 '■= 0.' In this case the encoders do not cooperate. Since Encoder 2 does not know 
the common information to transmit, it only injects statistically independent artificial noise. 

Corollary 3: For the Gaussian model <TTQb with C 12 := 0: 

1) An upper bound on the secrecy capacity is given by 

R" p = max 

E[Xf]<Pi, 
E[X|]<P 2 

2) A lower bound on the secrecy capacity is given by 

R l ™ = max 

where the maximization is over E[Xf] < P\ and E[Xf] < P 2 such that 

/ \h 2d \ 2 E[X 2 } 
\\h ld \ 2 nXf] + af 

Proof: 

Upper Bound. We bound the term in (flTT) as follows. The proof follows by using elements 
from an upper bounding technique developed in [fT51 . We assume that there is a noiseless link 
between Encoder 2 and the legitimate receiver, and the eavesdropper is constrained to treat 
Encoder 2's signal as unknown noise. The upper bound established for this model, with full 
cooperation between Encoder 2 and the legitimate receiver and a constrained eavesdropper, also 
applies to the model of Corollary |3] 

With full cooperation between Encoder 2-legitimate receiver link, the legitimate receiver can 
remove the effect of Encoder 2 transmission from the output Y of the MAC (flOl) (since the input 
from Encoder 2 is independent from Encoder 1 transmission because C\ 2 = 0). The equivalent 
channel model at the legitimate receiver is then given by 

Y' = h l4 X x + N x . (20) 



C 



\h ld \ 2 E[Xf 



C 





he 


| 2 E[Xf] 




+ | 


h 2e 


m[xi] 



(17) 



C 



\h ld \ 2 nxf] 

a 2 



C 





hie 


\ 2 E[X 2 } 




h 2e 


2 E[X 2 ] 



(18) 



>C 



\h 2e \ 2 E[Xl 



(To 



(19) 
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The eavesdropper is constrained in the sense that it is restricted not to decode Encoder 2 signals. 
For the constrained eavesdropper Encoder 2's transmission acts as unknown noise, the worst case 
is obtained with the X 2 being Gaussian distributed [[T5l . The equivalent channel model at the 
eavesdropper is given by 

Z'^h 1>e X 1 + h^eX2 +N 2 . (21) 
unknown noise 

The equivalent channel model, with full cooperation between Encoder 2-to-legitimate receiver 
link and worst case Encoder 2-to-constrained eavesdropper transmission, reduces to the Gaussian 
wiretap channel, the secrecy capacity of which is established in [2], i.e., 

C s = max I(X 1 ;Y')-I(X 1 ;Z') (22) 

p(xi)p(x2) 

where X l ~ W(0, Pi), and X 2 ~ W(0, P 2 ). 

Straightforward algebra shows that the computation of (|22l gives (flTI) . 

Lower Bound. The proof of the lower bound follows by evaluating the equivocation rate in 
Theorem [2] with a specific choice of the variables. More specifically, evaluating Theorem [2] with 
the choice C 12 := 0, U = V = (j), V\ : = X\ and V 2 := X 2 , with X 1 ~ A/"(0, Pi) independent of 
X 2 ~ A/"(0, P 2 ), and such that (fT9l) is satisfied, we obtain the rate expression in (fT8l) . The RHS 
of (US) then follows by maximization over E[Xf] < P 1 and E[X|] < P 2 and satisfying ([191). □ 

Remark 5: The bounds on the secrecy capacity in (fTTT) and (fT~8T > have identical expressions 
but the maximization is over different sets of inputs. The bounds coincide in the case in which 
the inputs (E[Xf], E[X|]) that maximize the RHS of ([17]) also satisfy the condition ([T9|) . In this 
case, the perfect secrecy of the studied model is given by 



C s = max 







\ 2 E[Xf] 


^2 + 1 


h 2e 


2 E[X|] 



(23) 



where the maximization is over E[Xf] < Pi and E[X|] < P 2 satisfying 



1 


h 2d 


2 E[X|] 




\ 2 E[Xf}+aj 



|/i 2e | 2 E[X 2 2 i 
a:- 



^1 , 'ZJ 2l J >C( m r 2l l. (24) 
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2) Case C 12 := oo: As stated previously, in this case the model (flOl ) reduces to a wiretap 
channel in which the transmitter equipped with two antenna and the legitimate receiver and 
eavesdropper equipped with single antennas. As it will be shown below, in this case the 
upper bound of Corollary [1] and the lower bound of Corollary coincide, thus providing a 
characterization of the secrecy capacity, which can also be obtained from BH, in this specific 
case. 



Corollary 4: For the Gaussian model dlOb with fully cooperating encoders, the secrecy 
capacity is given by 

C s = max[J(X 1 , X 2 ; Y) - I(X 1 , X 2 ; Z)\ (25) 

where [X h X 2 ] ~ A^(0, K P ) with K P = |k p : K P = [^^^^™], -1 < < 1 j, with 
E[Xf] and E[X|] satisfying CCD>. 

Proof: The upper bound follows by Corollary [T] The proof of the lower bound follows by 
evaluating the equivocation rate in Theorem |2] with a specific choice of the random variables. 
More specifically, the rate expression (12~5l is obtained by setting C\ 2 := oo, U := constant, 



Vi := Xi, V = V 2 = X 2 , in Theorem |2] where [X U X 2 ] ~ N(0, K P ) with /C P = | 



K P : K P = 



, -1 < -0 < 1 \ and E[X X 2 ] and E[X|] satisfying CCD- 



With straightforward algebra, it can be checked that this corresponds also to the special case 
C\ 2 := oo in Corollary |2] □ 

V. Numerical results 

In this section we provide some numerical examples to illustrate our results. We consider 
the Gaussian MAC (flOl) in which the outputs at the legitimate receiver and eavesdropper are 
corrupted by additive white Gaussian noise (AWGN) of zero mean and unit variance each. We 
model channel gains between node i £ {1,2} and j £ {d, e] as distance dependent path loss, 
h iy j = d~J^ 2 , where 7 is the path loss exponent. We assume that both users have an average 
power constraint of 1 watt each and the path loss exponent j:=2. We consider a network geometry 
in which Encoder 1 is located at the point (0,0), Encoder 2 is located at the point (d,0), the 
legitimate receiver is located at the point (1,0) and the eavesdropper is located at the point (1.5,0), 
where d is the distance between Encoders 1 and 2. The upper (fT2l and the lower (fT6l) bounds 
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Fig. 2. Bounds on the secrecy capacity. 



are optimized numerically for Gaussian inputs. Figure |2] shows the upper and lower bounds on 
the secrecy capacity for different values of finite capacity link. As a reference we consider the 
case in which there is no helping Encoder, i.e., a basic wiretap channel. If we set Ci 2 := 0, 
Encoder 1 does not conference to Encoder 2, for this setup the MAC (flOl) reduces to the classic 
WT-HI ifTTll . E7i In this case Encoder 2 can help Encoder 1 by injecting confusion codewords 
to confuse the eavesdropper [14, Theorem 3]. 

Figure |3] shows the power splitting at Encoder 2 to transmit conferenced information and 
artificial noise in (fT6l) . for different values of Cu- The region between 0.9 < d < 1.1 is 
of particular interest where Encoder 2 is near to the destination. It can be easily seen that 
when helping encoder, Encoder 2, is near to the destination no power is allocated to transmit 
the conferenced information to the legitimate receiver and the lower bound is maximized by 
independent inputs. Roughly speaking, this follows because when Encoder 2 is near to the 
destination noise injection provides higher secrecy rates. 

If we increase the capacity of noiseless bit-pipe, the achievable secrecy rate increases, this 
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■ Power used to inject noise, C 12 := 

■ Power used to trans, conf. inf., C 12 := 



*********************************************************** 



% 1 

o 

IX 



■ Power used to inject noise, G\i := 1 
■Power used to trans, conf. inf., G\% := 1 



*********************** 



■ Power used to inject noise, C12 := 6 

■ Power used to trans, conf. inf., C12 := 6 



****** *******4********* 



0.5 1 1 .5 

Location of Encoder 2 



2.5 



Fig. 3. Power splitting at Encoder 2 for different values of finite capacity link, where Encoder 1 is located at (0,0), the 
destination is located at (1,0) and the eavesdropper is located at (1.5,0). 



follows because Encoder 2 is more informed about the information message from Encoder 1 
and can cooperate with each other. For instance, if we consider a very large value of noiseless 
bit-pipe capacity, the upper and lower bounds will eventually coincide. This is due to the fact that 
a large value of Cu results in full cooperation between the encoders, due to which the channel 
reduces to a two-antenna transmitter wiretap channel for which secrecy capacity is established 
(Corollary @J. 

Figure |4] shows the optimized upper ([121 and lower ([To! bounds for the case in which we 
reverse the location of the destination and the eavesdropper for different values of finite capacity 
link. It can be seen that, even though the eavesdropper is at a more favorable position compared 
to the legitimate receiver, one can still obtain a positive secrecy rate due to the presence of 
the helping encoder. Figure |5] shows the corresponding power splitting at Encoder 2 to transmit 
conferenced information and artificial noise for the new setup. 



17 




Location of Encoder 2 

Fig. 4. Bounds on the secrecy capacity. 

VI. Conclusion 

We studied a special case of Willems's multi-access channel with partially cooperating 
encoders [|24l in the presence of a passive eavesdropper, from a security viewpoint. For the 
general DM case, we established outer and inner bounds on the capacity-equivocation region. The 
inner bound is obtained by a combination of Willems's coding scheme, injection of statistically 
independent artificial noise |[T4l Theorem 3] and binning for security. The outer bound is obtained 
by extending outer bounding techniques that are developed previously in the context of broadcast 
channels with confidential messages and Willems's model to the studied model. The developed 
outer and inner bounds do not agree in general, but can be seen as a step ahead towards 
characterizing the capacity-equivocation region. For the Gaussian setup, we focus on the case 
of perfectly secure transmission, and establish lower and upper bounds on the secrecy capacity. 
We also study some extreme cases of cooperation between the encoders. For the case in which 
the encoders do not cooperate the considered setup reduces to wiretap-channel with an external 
helper interferer, a setup whose secrecy capacity is still unknown ifTTl . Il27l . Il28l . For this 
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■ Power used to inject noise, Ci 2 := 

■ Power used to trans, conf. inf., C12 := 



Q' ******************************************************************** 



• Power used to inject noise, C12 := 1 
■Power used to trans, conf. inf., Cu := 1 



********************************************* * 



******************** 



Power used to inject noise, C12 := 6 
1 Power used to trans, conf. inf., C12 := 6 



run 



0.5 



1 1.5 

Location of Encoder 2 



2.5 



Fig. 5. Power splitting at Encoder 2 for different values of finite capacity link, where Encoder 1 is located at (0,0), the 
destination is located at (1.5,0) and the eavesdropper is located at (1,0). 



particular setup, we show that under certain conditions our lower and upper bounds coincide, 
and so we characterize the secrecy capacity fully. For the case of full cooperation between the 
encoders, the studied setup reduces to a wiretap channel in which the transmitter is equipped with 
two-antenna, and the legitimate receiver and eavesdropper are equipped with single antennas. In 
this case, the developed bounds agree, and so we obtain the secrecy capacity expression. 

Appendix I 
Proof of Theorem 1 

The converse uses elements from the proof given in the context of broadcast channels with 
confidential messages (31 and the proof established in the context of multiple access channel 
with partially cooperating encoders [|24l . We begin the proof by first setting W i2 '■= Gf. 



Bounds on the equivocation rate. 



19 



a) We first bound the equivocation rate R e as follows. 

nR e = H{W\Z n ) 

( = } H(W,W 12 \Z n ) 

= H(W,W 12 )-I(W,W 12 ;Z n ) 

= I(W, W l2 - Y n ) + H(W, W 12 \Y n ) - I(W, W 12 - Z n ) 

= I(W, W l2 - Y n ) + H{W\Y n ) - I(W, W 12 - Z n ) 

(c) n 

< £ W X2 \ nY 1 - 1 ) - I(W : W l2 - Zi\Z? +1 ) + ne n 

i=l 
n 

= KW, W 12 , Z? +l ; YtlY 1 - 1 ) - I(Z? +1 ; Y t \W, W 12 , F i_1 ) - I{W, W 12 , Z t \Z? +1 ) 

i=l 

+I(Y*- l ;Z t \W,W 12 ,Z? +1 )+ne n 

n 

@ W W ^ Z ?+v YilY'- 1 ) - I(W, W 12 , F i_1 ; Z,\Z^ X ) + ne n 

i=l 
n 

= I(Z? + i, Y^Y'- 1 ) + I(W, W 12 ; YtlY*- 1 , Zf +1 ) - /(Y*" 1 ; ^|^+i) 

i=l 

-/(iy,iy 12 ;^|r- 1 ,Z l " +1 ) + ne n 

n 

i J] I(W, W 12 ; Y^ 1 , Z? +l ) - I(W, W 12 ; Z^~\ Z? +1 ) + ne n (26) 

i=l 

where e n — > as n — > oo; (a) and (6) follow because VFi 2 is a function of VK, (c) follows from 
Fano's inequality; and (d) and (e) follows from Lemma 7 in [J3j. 

Let us define Ui := Y* -1 , Z? +1 , Vij := W, and F 2ji := Wi 2 , Y i-1 . We introduce a random 
variable T uniformly distributed over {1, 2, • • • , n} and define [7 := U T , V\ := V^t, V 2 := V^r, 
Xx := X 1>T , X 2 := X 2>T , Y := Y T , Z := Z T . Also, we let U := (T,U), V x : = (T,^), 
Y 2 := (T,V 2 ). 

Thus, we have 

1 n 

i? e < -Vl(^^ 12 ;y i |^-\Zf + J-/(W-,W' 12 ;Z i |y i - 1 ,Zf +1 ) + rie n 

n A — ' 

i=i 

1 n 

= - £ /(w, y'~\ z? +l] y|y-\ Zf +1 ) - I(W, w 12 , y*-\ z? +1 - Z^~\ Z? +1 ) + e n 
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1 

- - J2 1{ y^ Vtf Y i\Ui) - I{Vi,i, V 2/ , Zip,) + e n 

i=i 

= I(V X , \/ 2 ; F|f7, T) - 7(t4, K 2 ; Z\U, T) + e n 

= I(V X , V 2 , T; y |C7, T) - /(Fi, y 2 , T; Z\U, T) + e n 

^ I(V X , V 2 ; Y\U) - I(V X , y 2 ; Z|C/) + e n (27) 

where (/) follows from the definition of V x ^ an d V 2 /, and (g) follows from the definition 
of U, Vi and V 2 . 

We can also bound the equivocation rate R e as follows. We continue from (1261) to get 

1 n 

Re < - Y.HmW^nY'-^Z^) - I(W,W 12 -,Z t \Y l ~\Z^ +1 ) +e n 

i=l 
1 U 

= - V /(W; y |Wi 2 , y*- 1 , + /(w 12 ; y |y*-\ - /(w; w l2] z^-\ z? +1 ) + e n 

n — ' 

i=l 

i=l 
(i) 1 " 

< - V I(W; Y\W 12 , Y'~\ Z? +1 ) - I(W, W 12 - Z,\Y^\ Z? +x ) + C 12 + e n 
n 

i=i 
1 n 

= " E W Z " + i5 y l Wl2 ' y<-1 > ^ + i) " W W 12 , Y'~\ Z? +1 ; ZtlY*- 1 , Zf +1 ) + C 12 + e„ 

i=l 
1 n 

- - 1{ y^ Y ^ ^) - 7 (^.<> ^ + Ci2 + e « 
" ■ 1 

= i(v x] y |y 2 , t7, t) - i(v x , v 2 , z\u, t) + c 12 + e n 

= I(V X , T; Y\V 2 , U, T) - I(V X , V 2 , T; Z\U, T) + C 12 + e n 

( = } I{V X ; Y\V 2 , U) - I(V X , V 2 - Z\U) + C 12 + e n (28) 

where (h) follows because I{W x2 ]Y i \Y i - 1 , Zf) < i^Wi^y*" 1 , Zf) < #(Wi 2 ), (z) follows 
because #(Wi 2 ) < J]f=i H{G xk ) < J2k=i lo g(|£ifcl) < nC X2 , (j) follows from the definition 
of Ui, V X:i and V 2>i ; and (k) follows from the definition of U, V x and V 2 . 

Bounds on the transmission rate. 
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b) We now bound the transmission rate R as follows. 

nR = H(W) 

= H(W,W 12 ) 

= I(W, W l2 ; Y n ) + H{W, W 12 \Y n ) 
{ = ] I(W, W 12 ; Y n ) + H(W\Y n ) 
< I(W,W 12 ;Y n )+ne n 



= J2 I (W,W 12 ;Y l \Y*- 1 ) + 

8=1 

n 

= ^T l H(Yi\Y i - 1 )-H(Y i \W,W Vi ,Y i - 1 ) 
i=i 

(o) 71 

< ^HQQ-HpiWW^Yi-^ + ner 



ne r 



i=i 

n 



< ^ - H(Yi\W, W 12 , Y % ~\ Z? +1 ) + ne n 



i=i 



= ^/(iy,iy 12 ,y l - 1 ,Zr +1 ;F l )+ne„ (29) 
i=i 

where (/) and (m) follow because W\ 2 is a function of W, (n) follows from Fano's inequality; 
(o) and (j>) follow from the fact that conditioning reduces entropy. 
We continue from (|29|) to get 



R < - Y^IiW^W^Y^^Z^Y^ + en 



n . 

i=i 



(?) 1 



n 

i=l 



i=i 

= I(V u V 2 ;Y\T) + e n 

= I(V u V 2 ,T;Y)-I(T;Y) + e n 

< I(V u V 2 ,T;Y) + e n 

( = } 7(yi,y 2 ;y) + e n (30) 

where (g) follows from the definition of and V 2 /, and (r) follows from the definition of V\ 
and V 2 . 
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We can also bound the transmission R as follows 



nR = H(W) 



= H(W,Wn) 

= H(W\W 12 ) + H(W 12 ) 

(t) 

< H(W\W 12 )+nC 12 

= I(W;Y n \W 12 ) + H(W\W 12 ,Y n ) + nC 12 

< I(W; Y n \W 12 ) + H(W\Y n ) + nC l2 

(v) n 

< Ys^W^W^Y 1 - 1 ) +nC l2 + ne n 
i=i 

n 

= HiYtlWu, Y 1 " 1 ) - HfrlW, W 12 , y 1 " 1 ) + nC 12 + ne n 
i=i 

i w ) * — -v 

< H ( Y *\Wi 2 , Y*- 1 ) - H(Yi\W, W 12 , Y l ~\ Z? +1 ) + nC l2 + ne n 



i=i 

n 



1(W, Z? +1 ; Yi\ W 12 , Y 1 - 1 ) + nC l2 + ne n (31) 



i=i 



where (s) follows because W 12 is a function of W, (t) follows because H(Wi 2 ) < 
J2k=i-H(Gik) < J2k=i l°g(|£ifc|) — nCi 2 , (w) and (w) follow from the fact that conditioning 
reduces entropy; and (v) follows from Fano's inequality. 
We continue from (|3T| ) to get 



1 " 

R < -Y^I^Z^-Y^W^Y^ + C^ + er, 



n 

i=l 



1 n 

n z — ' 

j=i 

= /(F i; y|y 2 ,T) + C 12 + e n 
= I(V u T;Y\V 2 ,T) + C 12 + e n 

^ /(^ 1 ;F|V 2 ) + C , 12 + e n (32) 

where (a;) follows from the definition of and V^; and (y) follows from the definition of V\ 
and V 2 . 

This completes the proof of Theorem 1. 
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Fig. 6. Relationship between auxiliary random variables. 



Appendix II 



Proof of Theorem 2 



The proof is a combination of Willems's coding scheme [|24| and noise forwarding scheme 
established by Lai et al. Ifl4ll with additional binning for security [lj. We begin the proof by 
first setting V\ :— Xi, V 2 '■— X 2 in Theorem 2. After proving Theorem 2 with Xi,X 2 , we prefix 
a memoryless channel p(x±, x 2 \vi, v 2 ) = p(xi\v\)p(x 2 \v 2 ) as reasoned in [|3l Lemma 4] to finish 
the proof. Figure |6] shows the relationship between the auxiliary random variables. 

Random Coding. 

1) Randomly generate a typical sequence u n with probability p(u n ) = n™=i We assume 
that all terminals know u n . 

2) For each u n randomly generate 2 nRl2 independent and identically distributed (i.i.d) v n 
codewords, each with probability p{y n \u n ) = YYi=iP( v i\ u i) an ^ index them as v n (w ), 
w e [l,2 nRl2 ], where we set R l2 < C 12 . 

3) For each v n (wo) generate 2 nRl conditionally i.i.d Xy sequence, each with probability 
p(x r l\v n (w ), u n ) = Y[™ = iP(xii\vi(w ),Ui), and index them as x^(w 1 , w ), Wi G [l^^ 1 ]. 

4) For each v n (wo) generate 2 nR2 conditionally i.i.d x 2 sequence, each with probability 
p(x%\v n (w ),u n ) = Yl™ =1 p(x 2 i\vi(wo),Ui), and index them as x 2 (w c ,w ), w c G [l,2 ni?2 ], 
where we set R 2 = min{/(X 2 ; Y\V, U), I(X 2 ; Z\X X , V,U)} - e. 
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We define 

R" = R' + mm{I(X 2 ; Y\V, U), I(X 2 ; Z\X X , V, U)} - I(X 1 ,X 2 ; Z\U), (33) 

and R' = R 1 + R 12 , where W" = {I, . . . , 2 nR "}, C = {1, . . . , 2< R '- R "^} and /C = W x £. 
In the following we assume that R" > 0, otherwise this coding scheme does not achieve any 
security level. 

Encoding. 

For a given rate-equivocation pair (R, R e ) with R < R' and R e < R, we propose the following 
random coding scheme. Let w E W = {l,...2 nR } be the total number of message. The 
stochastic encoder performs the mapping as follows. 

. If R > R", then let W = W x J where J = {1, . . . , 2 n( - R ~ R "^}. Let g be the mapping 
that partitions C into J subsets of nearly equal size. The stochastic encoder then maps 
w = (w",j) — > (w", I), where / is uniformly chosen from <7 -1 (j) C C. We define t = (w", I), 
where t is further partition into w\ and of rates R\, and R\ 2 respectively. 

. If R < R", the stochastic encoder maps w — > (w, I), where / is uniformly chosen from C. 
Next we define t = (wj), where t is further partition into Wi and w of rates R\, and R\ 2 
respectively. 

After the mapping, Encoder 1 transmits x™(wi,w ) and Encoder 2 transmits x 2 (w c ,w ), where 
Encoder 2 randomly selects w c E {1, . . . , 2 nR2 }. 

Decoding. 

The legitimate receiver performs the decoding as follows. 

• After the conferencing process, Encoder 2 knows wo, if R± 2 < C\ 2 . 

• The legitimate receiver declares that (w = w ) was sent, by looking at jointly e-typical 

{x 2 l {w c ,w ),y n ,u n ). 

• The legitimate receiver then declares that (w c = w c ) was sent, by looking at jointly e-typical 

{x 2 L {w c ,w ),y n ,u n ). 

• Afterwards the legitimate receiver declares that (wi = Wi), if 
(x™(wi, wo), x 2 (w c , w ), y n , u n ) is jointly e-typical. 
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Probability of Error Analysis. 

To transmit (wi, w ) to the legitimate receiver, Encoder 1 and Encoder 2 transmit x\ (wx, w ) and 
X2(w c ,w ) respectively. Due to the symmetry of random code construction, the average error 
probability does not depends on the particular message index that was sent. Thus without loss 
of generality we consider that (w 1 , w ) = (1, 1) was sent and define the error events 

E W1W0 = {{v n {wo),x 7 l{w 1 ,wo),x^{w c ,w ),y n \u n ) e T™}. 

The error occurs if the transmitted and received codewords are not jointly typical (E^) or when a 
wrong codeword is jointly typical with the received codewords (E Wll or E mm ). The probability 
of decoding an error is given by 

p: < p(e c u ) + + E (34) 

W0=1 WQJ^l 

The first term, P(Ef 1 ) — > by AEP 0T1 Chapter 3]. Now we consider the second term in (l34l 
as follows 

]T P{E Wll ) < 2 nR ^ p(v n \u n ) P (x^\v n ,u n )p(x^\v n ,u n )p(y n \xlv n ,u n ) 
ioo=i y n \u n )er? 

(a) 

< ; 2 nRl 2 n ^ H ^ v ' Xl,X2,Y ^ + ^2~ n ^ H ^ u ^~^2~ n ^ H ^ Xl ^ v 

2-n(H(Y\X 2 ,V,U)-2e) 

2nRi2- n l H (V\U)+H(X 1 \V,U)+H(X 2 \V,U)-56]2-n[H(Y\X 2 y,U)-H(V,X 1 ,X2,Y\U)-3e] 

where (a) follows from the joint AEP 0T1 chapter 14]. 
Thus if 

Ri < H{V\U) + H(X 1 \V, U) + H(X 2 \V, U) + H(Y\X 2 , V, U) - H(V, X u X 2 , Y\U) - 8e 
= I(X 1 -Y\X 2 ,V,U)-8e (35) 

the second term in (l34l) goes to zero as n — > oo. From random code construction it follows that 

Ri + R12 < I{Xu Y\X 2 , V, U) + C 12 - 8e. 
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Next, we consider the third term in (|34l as follows 

P (E W1W0 ) < T^ +R ^ P(v n \u n )p(x?\v n ,u n )p(x%\v n ,u n )p(y n \u n ) 

wajtl y n \u n )GT™ 
(b) 

< 2 n ( R ^+ R ^)2 n ( H ( V ^ X i' X 2,y\U)+e)2-n(H(V\U)-e)2-n(H(X 1 \V,U)-2e)2-n(H(X 2 \V,U)-2e) 
2 -n{H{Y\U)-e) 

_ 2™(Ri+^i2)2-™[^(^l^)+^(^il^^)+^( X 2|V / ,t/)-5e]2-n[^(y|C/)-^(V',X 1 ,X2,y|(7)-2e] 

where (6) follows from the joint AEP 1)311 chapter 14]. 
Thus if 

Hi + R12 < H(V\U) + if(Xi|V, U) + #(X 2 | V, U) + - if(V, X u X 2 , Y\U) - 7e 

= J(X 1; X 2 ,\/;F|f/)-7e 

= I(X 1 ,X 2 ;Y\U)-7e (36) 

the third term in (|34l goes to zero as n — > oo. 

Therefore for a sufficiently large values of n, the probability of error goes to zero, if 

K < min{/(X i; Y\X 2 , V, U) + C 12 , J(X l7 X 2 ; F |f/)}. 
Equivocation computation. 

The computation of equivocation is given as follows. 



H(W\Z n ) >H(W\Z n ,U n ) 

= H(W, Z n \U n ) - H(Z n \U n ) 

= H{W, V n , X?, X 2 n , Z n \U n ) - H{V n , X?, X2\W, Z n , U n ) - H(Z n \U n ) 
= H(V n , X™, X^\U n ) + H(W, Z n \V n , X™, X™, U n ) - H(V n , Xf, X$\W, Z n , U n ) 
-H(Z n \U n ) 

> H(V n , X?, X%\U n ) + H(Z n \V n , X?, X 2 n , U n ) - H{V n , X?, X 2 n | W, Z n , U n ) 
-H(Z n \U n ). (37) 
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We first consider H(V n , X™, X^ \ W, Z n , U n ). Given W the eavesdropper only needs to decode 
I, and w c , which can be decoded because 

- log(|# -R"\) + R 2 = R'-R' + I(X U X 2 - Z\U) - min{J(X 2 ; Y\V, U), I{X 2 ; Z\X U V, U)} 
n 

+ min{/(X 2 ; Y\V, U), I(X 2 ; Z\X U V, U)} - e 
<I(X U X 2 ;Z\U). 

Therefore, it can be easily shown that, 

H(V n , XI, X™\W, Z n , U n ) < e 2 . (38) 
Since the channel is memoryless we can write 



H{Z n \U n ) - H(Z n \V n ,X?,X£,U n ) <nI{Xx,X 2 ,V;Z\U) + ne n 

= nI(X 1 ,X 2 ;Z\U) + ne n (39) 

where e n ->• 0, as n oo Q. If R > R" then H(V n , X™, X%\U n ) = H(V n ,X?\U n ) + 
H(X% \V n , X™, U n ) = nR' + nR 2 , which follows from codebook construction. The secrecy rate 
is then given by 

nR e > n(R' + R 2 - I{X 1 ,X 2 ; Z\U) - e 3 ). (40) 

If R < R", H(V n ,X?,X2\U n ) = H(V n ,X?\U n ) + H(X£\V n , X?, U n ) > n(R + 
I(X U X 2 ; Z\U) - R 2 ) + nR 2 then 

nR e > n(R + I(X 1} X 2 ; Z\U) - I(X 1 ,X 2 ; Z\U) - e 3 ) 

= n(R-e 3 ). (41) 



Therefore, perfect secrecy is obtained. 
This completes the proof of Theorem 2. 
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